Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: c9fbEqE1I79khC+JjQlUsduDgyps1ee7/w1OUGWhUYY=
Subject key identifier: ED:C5:75:4F:BD:EC:C8:D8:28:10:A8:AA:94:ED:EB:36:A1:52:5C:9A
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 019D39AEE3A60BF4AA96752C37F7C508ED8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 15A9
Signing time: Sun 29 Mar 2026 13:00:55 +0000
Manifest this update: Sun 29 Mar 2026 13:00:55 +0000
Manifest next update: Mon 30 Mar 2026 13:00:55 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: c95LQfeLEhQiv8U0zS3Ef8jMMxtdIbAwpEgHeRFm5+s=)
2: ax6eIjHYuyl0QBv51Atz3wWcyoE.roa (hash: VeATSBlllh5K01G1TOhorfGAawwB+xV+zgL6EEsH3z0=)
3: ky99BlOPlH5O6f7O36UwCkNpB5c.roa (hash: tyITeyFzQukDFtq+qQfcsC7Kui3xVMsWGSDU3eA4x4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e3:a6:0b:f4:aa:96:75:2c:37:f7:c5:08:ed:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Mar 29 13:00:55 2026 GMT
Not After : Mar 30 13:00:55 2026 GMT
Subject: CN=edc5754fbdecc8d82810a8aa94edeb36a1525c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:b9:a9:f4:b4:94:db:34:f6:79:7b:2a:64:
07:62:1c:cf:8b:ff:c8:c7:aa:d2:ac:4a:66:65:f5:
76:73:e3:24:fa:f5:6a:41:bc:28:3c:19:a3:05:65:
b0:b7:22:15:01:ad:62:ca:91:33:ba:34:35:a7:e8:
f7:57:05:8c:f9:ce:a7:df:dd:2d:4a:e0:92:d5:19:
4b:c5:02:23:27:c1:e7:1e:08:b9:8a:6e:ba:87:30:
a7:77:9e:af:c8:4d:44:2f:f9:16:b8:48:fd:bf:6a:
3a:e8:5a:b9:a9:2f:c3:cb:74:bb:5b:1b:fc:7a:db:
70:0f:51:54:07:96:5b:7b:d1:dc:ba:c0:3f:0e:65:
45:44:15:75:59:a1:b4:f5:47:18:6b:d5:00:f8:fd:
ef:2f:aa:6d:62:05:a3:d8:73:43:fd:09:11:30:34:
54:03:e7:5f:b0:14:c2:27:54:3d:30:31:78:d8:f3:
5f:59:f4:6d:89:56:5e:99:fc:8e:df:01:13:2e:93:
f2:27:ee:49:83:25:81:0c:b3:09:f2:6f:e9:40:a1:
a1:2a:ed:f9:95:c1:86:9e:b7:62:d9:cd:41:2d:51:
46:80:16:85:e0:b0:a4:d4:3b:bb:f2:4d:32:11:51:
b9:d9:aa:2d:5b:82:1e:19:41:8f:5c:e4:a9:c0:01:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:75:4F:BD:EC:C8:D8:28:10:A8:AA:94:ED:EB:36:A1:52:5C:9A
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:07:6f:ca:42:71:47:9b:62:20:97:c7:06:2c:26:90:15:f4:
38:49:6d:0e:9e:e6:da:62:11:04:b9:1c:46:c8:92:c2:80:19:
e5:c5:9c:0a:3d:08:c1:0e:bc:64:e6:da:44:01:f0:2b:57:aa:
99:bd:96:16:b9:ac:b9:4b:a6:50:3c:d7:0e:e6:cc:c2:28:80:
59:98:46:23:78:51:c0:33:15:fc:4b:0f:c0:95:77:94:32:ae:
0d:77:ff:d2:9e:51:c4:a4:c5:d5:95:38:cd:9a:9a:5d:7a:a5:
f6:2f:ef:7b:6e:a7:23:e6:42:87:11:14:f6:98:c6:11:a3:01:
60:a1:10:ab:ef:87:36:bb:73:df:6a:ca:7a:16:23:58:1d:9a:
71:eb:f4:8c:45:1c:80:f6:c5:dd:45:a7:2d:2e:85:17:10:11:
74:d8:8f:78:9a:71:3c:98:02:b0:f5:94:d3:e9:f3:46:70:1f:
19:24:a7:06:58:e0:9c:5b:c3:4a:62:40:bb:0d:86:ca:23:8b:
6e:ec:b0:7b:a5:41:5c:12:03:6e:49:8f:df:3a:78:4f:ee:89:
ee:14:6b:bd:8a:1b:4a:ec:c6:2d:39:d3:31:8e:10:72:20:a7:
66:2b:af:5b:6c:2f:f9:11:74:67:05:82:3f:b3:9b:8d:a2:ee:
96:10:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:13 2026 by rpki-client